
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft
File: 627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft (raw, json)
Hash identifier: DS2MiDLE0h2II7M4/oPXiwZtQSecm0id2GW+Ba9iZ18=
Subject key identifier: 79:C1:90:10:D8:9C:D5:6C:98:2B:B0:9D:B8:1C:E4:79:F7:CA:AA:6B
Authority key identifier: 62:7B:38:76:04:DE:44:D6:00:6F:0E:75:67:E2:D0:7E:E8:2C:F6:BD
Certificate issuer: /CN=627B387604DE44D6006F0E7567E2D07EE82CF6BD
Certificate serial: 64E5199191EA2117A557AB07A27306C897EC014E
Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/627B387604DE44D6006F0E7567E2D07EE82CF6BD.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft
Manifest number: 11
Signing time: Sun 22 Feb 2026 17:42:07 +0000
Manifest this update: Sun 22 Feb 2026 17:37:07 +0000
Manifest next update: Mon 23 Feb 2026 20:01:07 +0000
Files and hashes: 1: 326130613a363034343a376430303a3a2f34342d3434203d3e20323134353130.roa (hash: ae529QqeuntcTFvv9T15+WP4/UdZC9RUyhsU7rktznM=)
2: 326130613a363034343a376432323a3a2f34382d3438203d3e20323134353130.roa (hash: 2VvQmqh0rgVlWv8W6Pzf59GFxuPhxLO/UhXjGSwmG7I=)
3: 627B387604DE44D6006F0E7567E2D07EE82CF6BD.crl (hash: wqnsxAMyKqTIEdQxE/7tMmFT1RIdN45l/GGjzAu80LE=)
4: 326130613a363034343a376436303a3a2f34342d3434203d3e20323134353130.roa (hash: y/xuVv7X6zYCJrPA+bDxsoe/LQIZz7CWdfVo8c7UFKw=)
5: 326130613a363034343a376432303a3a2f34382d3438203d3e20323134353130.roa (hash: c4XzPukkzKV+FHVuebz0bc6eIqhJ7TnmT9Q2167h39Y=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.crl
rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft
rsync://krill.47272.net/repo/HYEHOST/5/627B387604DE44D6006F0E7567E2D07EE82CF6BD.cer
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Feb 2026 19:39:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:e5:19:91:91:ea:21:17:a5:57:ab:07:a2:73:06:c8:97:ec:01:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=627B387604DE44D6006F0E7567E2D07EE82CF6BD
Validity
Not Before: Feb 22 17:37:07 2026 GMT
Not After : Feb 23 20:01:07 2026 GMT
Subject: CN=79C19010D89CD56C982BB09DB81CE479F7CAAA6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:40:22:41:33:8e:68:21:98:ff:c8:cf:52:55:
01:40:49:f5:0f:6b:00:9a:be:d4:96:6f:6c:e9:97:
0c:c8:dd:29:66:21:02:5e:4f:6f:05:55:25:ac:f5:
9d:73:47:14:9b:c1:6a:5b:a8:33:74:6c:91:a6:56:
c3:0e:c8:51:86:3b:b1:91:9b:40:ad:9c:0c:80:70:
23:7c:82:b8:95:cd:fa:cc:37:e0:41:05:45:7b:ad:
60:4c:fc:50:f0:ec:8a:9f:e0:af:76:d2:34:27:49:
d6:9b:2b:ca:14:8a:e5:c6:06:00:35:6a:d9:86:6e:
d5:1d:3f:a0:35:e1:d8:78:2e:8b:af:35:b7:a1:95:
45:b1:ec:03:08:33:04:dc:47:09:27:dc:75:fa:26:
8d:55:be:9a:5d:b9:10:30:fb:0a:10:5f:22:c1:c4:
0d:62:d0:e5:03:6d:2a:73:b5:59:a1:03:4a:ad:0b:
21:00:1a:01:05:12:13:ca:c5:3b:9d:0f:63:d7:46:
ba:f8:d2:49:d9:9b:9e:1f:85:a7:11:68:ca:7d:23:
0e:bb:92:a9:9c:82:65:81:4e:79:b1:36:cb:d5:d4:
22:07:8a:fe:0e:b5:a3:38:26:fd:f6:8a:84:01:cd:
b0:15:91:ef:46:73:64:3e:4e:ed:71:05:a6:fb:7a:
b2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C1:90:10:D8:9C:D5:6C:98:2B:B0:9D:B8:1C:E4:79:F7:CA:AA:6B
X509v3 Authority Key Identifier:
keyid:62:7B:38:76:04:DE:44:D6:00:6F:0E:75:67:E2:D0:7E:E8:2C:F6:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/627B387604DE44D6006F0E7567E2D07EE82CF6BD.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f2:c2:9c:6e:7d:1d:87:e8:e5:a7:a5:5d:1b:84:ba:c8:dd:
52:5e:38:22:a2:98:68:91:97:cd:6d:3a:b4:3b:34:65:96:9e:
c0:dd:5e:03:27:60:cd:87:c6:67:46:2b:be:05:e3:89:4d:d3:
32:ce:7f:04:9e:f3:02:bf:c5:b8:cf:65:dd:c3:9d:48:55:f7:
8c:9d:79:8f:bb:2b:f2:df:fb:20:48:6d:ad:a0:3e:f3:e3:92:
c6:b4:2d:f9:c3:e6:a5:c7:ba:25:2b:a4:13:0d:6c:58:b0:68:
39:ee:7f:c1:d4:cf:64:21:e9:03:d6:ed:1b:e7:7d:52:93:00:
53:93:91:df:fa:56:a8:80:ee:57:01:cb:77:e1:a9:f1:95:f6:
62:ad:57:a9:af:60:8b:61:1d:04:29:50:bf:0b:9f:92:ec:37:
e1:d9:94:56:12:0e:fd:53:f6:bf:6a:25:8b:58:53:48:85:3c:
83:fd:68:67:25:41:ac:36:70:ab:a4:50:43:c3:a9:2c:08:d2:
00:3a:9b:56:5a:8a:e9:61:c3:90:4b:bb:64:ae:86:78:ae:b1:
69:3f:f9:a1:c7:ed:13:d3:78:5a:2b:b8:62:0e:17:c6:66:91:
23:ee:66:1f:cb:df:9e:a8:fc:0f:37:42:ae:6d:30:53:83:9c:
7d:d7:33:cf
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUZOUZkZHqIRelV6sHonMGyJfsAU4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjI3QjM4NzYwNERFNDRENjAwNkYwRTc1NjdFMkQwN0VF
ODJDRjZCRDAeFw0yNjAyMjIxNzM3MDdaFw0yNjAyMjMyMDAxMDdaMDMxMTAvBgNV
BAMTKDc5QzE5MDEwRDg5Q0Q1NkM5ODJCQjA5REI4MUNFNDc5RjdDQUFBNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUQCJBM45oIZj/yM9SVQFASfUP
awCavtSWb2zplwzI3SlmIQJeT28FVSWs9Z1zRxSbwWpbqDN0bJGmVsMOyFGGO7GR
m0CtnAyAcCN8griVzfrMN+BBBUV7rWBM/FDw7Iqf4K920jQnSdabK8oUiuXGBgA1
atmGbtUdP6A14dh4LouvNbehlUWx7AMIMwTcRwkn3HX6Jo1VvppduRAw+woQXyLB
xA1i0OUDbSpztVmhA0qtCyEAGgEFEhPKxTudD2PXRrr40knZm54fhacRaMp9Iw67
kqmcgmWBTnmxNsvV1CIHiv4OtaM4Jv32ioQBzbAVke9Gc2Q+Tu1xBab7erIVAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUecGQENic1WyYK7CduBzkeffKqmswHwYDVR0j
BBgwFoAUYns4dgTeRNYAbw51Z+LQfugs9r0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNGJmYTdhOWYtMjhkMy00NWIwLWE4MzktYTU3NTE5ZWNh
ZWFlLzIvNjI3QjM4NzYwNERFNDRENjAwNkYwRTc1NjdFMkQwN0VFODJDRjZCRC5j
cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3
MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS82MjdCMzg3NjA0REU0NEQ2MDA2RjBFNzU2
N0UyRDA3RUU4MkNGNkJELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzRiZmE3YTlmLTI4ZDMtNDViMC1hODM5LWE1NzUxOWVjYWVhZS8yLzYyN0IzODc2
MDRERTQ0RDYwMDZGMEU3NTY3RTJEMDdFRTgyQ0Y2QkQubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA18sKc
bn0dh+jlp6VdG4S6yN1SXjgiophokZfNbTq0OzRllp7A3V4DJ2DNh8ZnRiu+BeOJ
TdMyzn8EnvMCv8W4z2Xdw51IVfeMnXmPuyvy3/sgSG2toD7z45LGtC35w+alx7ol
K6QTDWxYsGg57n/B1M9kIekD1u0b531SkwBTk5Hf+laogO5XAct34anxlfZirVep
r2CLYR0EKVC/C5+S7Dfh2ZRWEg79U/a/aiWLWFNIhTyD/WhnJUGsNnCrpFBDw6ks
CNIAOptWWorpYcOQS7tkroZ4rrFpP/mhx+0T03haK7hiDhfGZpEj7mYfy9+eqPwP
N0KubTBTg5x91zPP
-----END CERTIFICATE-----
Generated at Mon Feb 23 07:34:40 2026 by rpki-client